You might have found this following your post. The "SAML Authentication Server Configuration Guide" is a good place to start. It has a section "Using Google G Suite as the SAML Identity Provider" which has coverage of the integration and requirement...
Here's a quick update for anyone following this:
ZoneDirector’s Block Clients (system wide) feature will not prevent listed clients from connecting to an autonomous WLANs when a L2 ACL is assigned to the autonomous WLAN.
When no L2 ACL is assigned...
